Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1A632196A1D98B659C297C371E332C45C1B12A21.cer
File:                     1A632196A1D98B659C297C371E332C45C1B12A21.cer (raw, json)
Hash identifier:          J/Cd0aSfcG1OL02QySfCZ5Tl6emdegBFaMdZwrLR+zw=
Subject key identifier:   1A:63:21:96:A1:D9:8B:65:9C:29:7C:37:1E:33:2C:45:C1:B1:2A:21
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       12C6D78DCBD998460ED5815E62B85776AE83A9B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/1A632196A1D98B659C297C371E332C45C1B12A21.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Nov 2023 15:16:03 +0000
Certificate not after:    Fri 22 Nov 2024 15:21:03 +0000
Subordinate resources:    AS: 268659
                          IP: 45.165.64.0/22
                          IP: 45.165.88.0/23
                          IP: 2804:5494::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c6:d7:8d:cb:d9:98:46:0e:d5:81:5e:62:b8:57:76:ae:83:a9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 24 15:16:03 2023 GMT
            Not After : Nov 22 15:21:03 2024 GMT
        Subject: CN=1A632196A1D98B659C297C371E332C45C1B12A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:29:a0:5e:21:53:c4:4e:c7:e5:ff:6b:64:da:
                    0a:4c:15:4b:20:07:f4:aa:d7:e7:a2:4d:27:f4:75:
                    a5:18:28:de:e6:51:6a:29:db:9c:4c:54:42:02:5e:
                    c6:02:32:71:b5:01:8a:cb:ee:eb:da:55:c9:f7:bc:
                    ea:22:7e:94:f2:24:51:1f:b7:ad:3b:1a:2e:02:72:
                    b7:c9:9c:b5:43:e1:24:5c:ad:d0:7e:73:4d:85:2e:
                    fa:d0:94:20:e9:8c:76:85:6b:e7:0d:e6:ad:36:9d:
                    d4:c3:e1:0d:a2:c6:d9:58:c5:3e:24:48:0c:2a:81:
                    85:e4:d6:18:2a:18:20:fd:b5:cd:03:91:fc:21:d3:
                    74:27:6e:a3:e4:04:a1:6b:a7:52:39:0f:9b:44:f5:
                    50:2a:04:5c:08:20:74:24:7a:01:b5:83:cf:18:d2:
                    f8:29:34:93:0b:cc:f8:e8:dc:a9:86:8d:d2:d8:95:
                    ef:c7:3c:8c:b2:77:41:5e:5e:8d:18:cb:7a:d8:08:
                    d0:8b:0e:0d:68:e6:e8:cc:2d:c0:5e:d3:d0:1e:23:
                    b3:a6:f2:2c:f0:dc:33:c1:50:57:c8:5b:b2:5f:63:
                    2b:18:0f:67:68:a4:33:dd:82:76:d2:36:c1:d1:e9:
                    2a:71:c5:49:4c:ad:55:bc:ac:54:ee:2f:a4:2f:b1:
                    0a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:63:21:96:A1:D9:8B:65:9C:29:7C:37:1E:33:2C:45:C1:B1:2A:21
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/1A632196A1D98B659C297C371E332C45C1B12A21.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.64.0/22
                  45.165.88.0/23
                IPv6:
                  2804:5494::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268659

    Signature Algorithm: sha256WithRSAEncryption
         7f:92:53:62:d6:ec:eb:48:fa:b1:6e:56:fe:b5:70:21:82:87:
         45:46:23:f2:45:8c:12:77:0a:c8:6c:c4:97:7b:d6:f1:39:2c:
         0d:cb:c3:62:13:d6:9c:65:d9:d8:28:5e:c5:44:d1:76:e0:be:
         36:e1:9a:e9:97:04:03:f4:7f:88:b3:91:d4:d4:d7:e0:4b:af:
         78:62:da:39:4f:50:2f:11:c9:6b:48:33:30:67:d9:50:07:2b:
         2a:27:ed:24:59:73:04:c1:27:c8:c0:01:47:2e:f7:82:f2:00:
         ba:ea:93:19:8e:90:12:df:68:4a:47:88:19:d8:44:81:06:58:
         aa:7a:5d:2f:b5:99:a5:1d:aa:1e:ef:78:eb:c2:e9:f8:41:89:
         70:0d:0c:26:35:c6:ac:49:3f:7d:11:48:80:d7:1c:d1:9f:1f:
         62:0e:12:81:b9:a0:41:c0:94:a9:69:e8:c4:5e:1e:36:65:7c:
         df:db:80:58:c4:fb:d2:ff:01:25:60:aa:21:36:2f:c8:a0:2a:
         c2:c8:8d:dc:0b:29:a6:ae:92:af:9b:e4:f4:07:bd:5d:25:ab:
         9f:2d:55:e1:27:22:09:4f:4b:d5:31:ee:54:ff:15:31:f5:56:
         18:ca:25:cf:e0:cf:2d:89:2b:4c:55:39:43:b3:01:02:f9:c3:
         17:1d:d2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org